Security Advisory

CVE-2026-44643

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-11 14:33:42
Last updated 2026-05-11 16:22:58
Assigner GitHub_M
CVSS score 9.3
State PUBLISHED

Description

Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to 1.5.2, an attacker can write a malicious expression using filters that escapes the sandbox to execute arbitrary code on the system. This vulnerability is fixed in 1.5.2.